Lightweight Authenticated Key Agreement for IoT
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Resource-constrained wireless sensor networks (WSNs) face challenges in implementing cryptographic algorithms and protocols for authenticated key agreement (AKA) due to high computational and memory requirements, particularly in large-scale IoT deployments where key escrow is undesirable.
Innovation Solution
A lightweight, pairing-free, and escrow-free AKA protocol using implicitly-certified authentication keys based on elliptic curve cryptography, specifically combining the strengthened Menezes-Qu-Vanstone (SMQV) protocol with implicit certificates for secure key generation and validation, avoiding the need for traditional PKI-based certificates and trusted authorities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional PKI-based certificates and cryptographic algorithms are used for authenticated key agreement, then security is improved, but computational overhead and memory requirements increase significantly
Solution Approach 1:
The patent changes the cryptographic parameters by using implicitly-certified authentication keys based on elliptic curve cryptography instead of traditional PKI certificates. This involves using a hash function H1 applied to identity data and random points on an elliptic curve to generate public keys, which reduces the computational complexity while maintaining security. The key agreement protocol uses these modified parameters to achieve both security and efficiency in resource-constrained IoT devices.
2Reliability
If traditional PKI-based certificates are used for key agreement, then authentication security is improved, but memory requirements increase due to large certificate sizes
Solution Approach 1:
The patent extracts the essential authentication functionality from traditional PKI certificates by using implicitly-certified keys. Instead of storing and processing large certificate structures, the system extracts only the necessary cryptographic elements (identity data, random points on elliptic curves, and derived public keys) to achieve authentication. This extraction reduces memory requirements while preserving authentication security.
3Ease of operation
If key escrow is implemented in lightweight WSN schemes, then key management is simplified, but security is compromised due to trusted authority requirements
Solution Approach 1:
The patent implements self-service key management where each device independently generates its own authentication keys using the implicitly-certified scheme. Devices use their identity data and random points on elliptic curves to generate public keys without requiring a trusted authority to hold or manage their private keys. This eliminates the key escrow vulnerability while maintaining ease of key management through automated local key generation and validation.
Data Source
AI summary
A method for computing a shared key (K) for encrypting data between a first device and a second device. The method includes communicating a first private ephemeral key (XA), and a first parameter set (YA) to a second device. The first parameter set (YA) includes identity data (IDA) that identifies the first device, a random point (VA) on an elliptic curve, and a first public key (UA). The first device receives a second private ephemeral key (XB) and a second parameter set (YB). The second parameter set (YB) includes identity data (IDB) that identifies the second device, a random point (VB) on the elliptic curve, and a second public key (UB). Verifying operations are performed to verify the second public key (UB) and the second private ephemeral key (XB) as valid. A shared key (K) is then computed based at least on the first parameter set (YA), the second parameter set (YB), the first private ephemeral key (XA), and the second private ephemeral key (XB).